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Abstract — We generalize the list decoding algorithm for Hermi- 
tian codes proposed by Lee and O'Sullivan 1 15 1 based on Grobner 
bases to general one-point AG codes, under an assumption 
weaker than one used by Beelen and Brander |4|. By using 
the same principle, we also generalize the unique decoding 
algorithm for one-point AG codes over the Miura-Kamiya C„b 
curves proposed by Lee, Bras-Amoros and O'Sullivan |14) to 
general one-point AG codes, without any assumption. Finally we 
extend the latter unique decoding algorithm to list decoding, 
modify it so that it can be used with the Feng-Rao improved 
code construction, prove equality between its error correcting 
capability and half the minimum distance lower bound by 
Andersen and Geil |3| that has not been done in the original 
proposal, and remove the unnecessary computational steps so 
that it can run faster. 

I. Introduction 

We consider the list decoding of one-point algebraic geome- 
try (AG) codes. Guruswami and Sudan [12] proposed the well- 
known list decoding algorithm for one-point AG codes, which 
consists of the interpolation step and the factorization step. 
The interpolation step has large computational complexity 
and many researchers have proposed faster interpolation steps, 
see [4, Figure 1]. Lee and O'Sullivan [15| proposed a faster 
interpolation step based on the Grobner basis theory for one- 
point Hermitian codes. Little [16| generalized their method 
[15 1 by using the same assumption as Beelen and Brander (4] 
Assumptions 1 and 2]. The aim of the first part of this paper 
is to generalize the method |15| to an even wider class of 
algebraic curves than |[T6l . 

The second part proposes another list decoding algorithm 
whose error-correcting capability is higher than [4], [12|, 
03], lfl6l and whose computational complexity is empirically 
manageable. Lee, Bras-Amoros and O'Sullivan iPPJl . Ifl4l 
proposed a unique decoding (not list decoding) algorithm for 
primal codes based on the majority voting inside Grobner 
bases. 

There were several rooms for improvements in the original 
result fl4l . namely, (a) they have not clarified the relation 
between its error-correcting capability and existing minimum 
distance lower bounds except for the Hermitian codes, (b) 
they assumed that the maximum pole order used for code 
construction is less than the code length, and (c) they have 
not shown how to use the method with the Feng-Rao improved 
code construction (6). In the second part of this paper, we shall 
(1) prove that the error-correcting capability of the original 
proposal is always equal to half of the bound in (3) for the 
minimum distance of one-point primal codes, (2) generalize 
their algorithm to work with any one-point AG codes, (3) 
modify their algorithm to a list decoding algorithm, (4) remove 
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the assumptions (b) and (c) above, and (5) remove unnecessary 
computational steps from the original proposal. The proposed 
algorithm is implemented on the Singular computer algebra 
system ifTTl . and we verified that the proposed algorithm can 
correct more errors than [|4], |[T2l . lfT5l . [16] with manage- 
able computational complexity. The omitted proofs and the 
implementation of the proposed algorithm are available as the 
expanded versions [7|, [8] of this conference paper. 

II. Notation and Preliminary 

Our study heavily relies on the standard form of algebraic 
curves introduced independently by Pellikaan ifTOl and Miura 
[20|. Let F/F q be an algebraic function field of one variable 
over a finite field F 9 with q elements. Let g be the genus of F. 
Fix n+ 1 distinct places Q, Pi, . . . , P n of degree one in F and 
a nonnegative integer u. We consider the following one-point 
algebraic geometry (AG) code 

C k = {(/(P 1 ),...,/(P„))|/gX(m0}. 
Suppose that the Weierstrass semigroup H(Q) at Q is gen- 
erated by a\, . . . , a,, and choose t elements x\, . . . , x, in F 
whose pole divisors are (xfica = aiQ for i = 1, . . . , t. Without 
loss of generality we may assume the availability of such x\, 
. . . , x,, because otherwise we cannot find a basis of C„ for 
every u. Then we have that £.{ooQ) = U°!jXO0 is equal to 
F 9 [jci, . . . , x,] [21 j. Let m,- be the maximal ideal P,- n -£(°°0 
of -C(ooQ) associated with the place P,. We express H(ooQ) 
as a residue class ring F q [X\, X,]/I of the polynomial 
ring ¥ q [Xi, X,], where X\, X, are transcendental 
over F 9 , and / is the kernel of the canonical homomorphism 
sending X, to x,. Pellikaan and Miura [10|, [20| identified the 
following convenient representation of X(°°0 by using the 
Grobner basis theory JT). The following review is borrowed 
from [ 1 8 1 . Hereafter, we assume that the reader is familiar 
with the Grobner basis theory in JT|. 

Let No be the set of nonnegative integers. For (mi, . . . , m,), 
(«i, . . . , n t ) e N , we define the monomial order > such that 
(mi, . . . , m t ) > («i, . . ., n t ) if a\m\ +■ ■ ■+a,m, > a\ti\ + - ■ -+a t n,, 
or a\ni\ + • • • + a t m, — ci\n\ + ■ • • + a,n t , and ni\ — ti\, rri2 — ri2, 
m,_i = tii-i, mi < fti, for some 1 < / < t. Note that a 
Grobner basis of / with respect to > can be computed by [21 
Theorem 15] or ll22l Theorem 4.1], starting from any affine 
defining equations of F/F q . 

For i = 0, . . . , a\ — 1, we define £>, = minjm € H(Q) \ m = i 
(mod a\)}, and L; to be the minimum element (mi, . . . , m t ) e 

Nq with respect to < such that flimi H va t m t = b t . Then we 

have (\ — if we write L,- as ((\, . . . , (,). For each L,- = (0, 
l a , . . • , 4), define y t = ■ --xf' € £(o°Q). 
The footprint of /, denoted by A(7), is {(mi, 
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, m,) € 

■X™' is not the leading monomial of any nonzero 



polynomial in / with respect to <}, and define B = [x. 



(mi, . . . , to,) e A(/)}. Then B is a basis of H(ooQ) as an F 9 - 
linear space fl], two distinct elements in B have different pole 
orders at Q, and 
B 

= {x»ji£ • • ■ , xf | m e No, (0, £ 2 £,) e {L , . . . , V-i}} 

= {jtfyi I m e No,/ = 0,. 1). (1) 

Equation (QJi shows that XipoQ) is a free F g [xi] -module with 

a basis {y , 

Let vq be the unique valuation in F associated with the 
place Q. The semigroup S = H(Q) is equal to S — [ia\ - 
v Q(yj) I < /, < j < a{\. For each nongap s e S there is 
a unique monomial x\yj e -C{°°Q) with < j < a\ such that 
-VQ(x\yj) — s by [18, Proposition 3.18], and let us denote 
this monomial by <p s . Let T c S, and we may consider the 
one-point codes 

CT = ((<p s (Pl),---,9s(Pn))\s€T}. (2) 

One motivation for considering these codes is that it was 
shown in (3) how to increase the dimension of the one-point 
codes without decreasing the bound for the minimum distance. 
III. Generalization of Lee-O' Sullivan's List Decoding to 
General One-Point AG Codes 

A. Background on Lee-O' Sullivan's Algorithm 

In the famous list decoding algorithm for the one-point AG 
codes in |fl2l . we have to compute the univariate interpolation 
polynomial whose coefficients belong to £X°°Q)- Lee and 
O' Sullivan [15| proposed a faster algorithm to compute the 
interpolation polynomial for the Hermitian one-point codes. 
Their algorithm was sped up and generalized to one-point 
AG codes over the so-called C a b curves lfT9l by Beelen and 
Brander [4] with an additional assumption. In this section 
we generalize Lee-O' Sullivan's procedure to general one-point 
AG codes with an assumption weaker than [4, Assumption 2], 
which will be introduced in and used after Assumption [2] 

Let m be the multiplicity parameter in [12|. Lee and 
O' Sullivan introduced the ideal I? m containing the interpo- 
lation polynomial corresponding to the received word r and 
the multiplicity to. The ideal If m contains the interpolation 
polynomial as its minimal nonzero element with respect to the 
monomial order. We will give another module /' for general 
algebraic curves, from which we can also obtain the required 
interpolation polynomial. 

B. Definition of the Interpolation Ideal 

Let f > = (ri, . . . , r„) £ F" be the received word. For a divisor 
G of F, we define £(-G + oog) = (J£i £(~G + iQ). We see 
that JX-G + oog) is an ideal of X(oog) |fT71 . 

Let hf € JX°°Q) such that hf(Pi) - r,. Computation of such 
hf is easy provided that we can construct generator matrices for 
C u for every u. We can choose hf so that -vg(/v) < n + 2g-\. 

Let Z be transcendental over X(°°0, and D — P\ H \-P n . 

Define the set V fm = {Q(Z) e X(oog)[Z] | Q(Z) has multi- 
plicity m for all (P,, ri)}. This definition of the multiplicity 
is the same as [12]. Therefore, we can find the interpolation 
polynomial used in [12] from I' f . We shall explain how to 
find efficiently the interpolation polynomial from /' . 

For / = 0, . . . , m and j = 0, . . . , a\ — 1, let 77, j to be an 
element in £.(-iD + oaQ) such that —VqOj^j) is the minimum 
among {-v Q (r]) e £(-iD+ooQ) \ -vq(j]) = j (mod a{}}. Such 
elements rjij can be computed by [17| before receiving f. It 
was also shown IfTTl that {77, -j | j = 0, . . . , a\ — 1} generates 
JL(—iD + 00Q) as an F 9 [jci] -module. Note also that we can 



choose j]oj - y, defined in Sec. [TT] By Eq. ([TJ, all r\ U j and hf 
can be expressed as polynomials in X\ and yo, . . . , y ai -\- Thus 
we have 

Theorem 1: Let i>m. {(Z-hf) m -' l m j \ i = m, j = 0, 

...,fli-l] U{Z e - m (Z - hf) m r] j \{= l,'...,j = 0, ...,ai-l] 
generates If m/ = I tm n \Q(Z) e X(ooQ)[Z] | deg z Q(Z) < £} as 
an F f/ [xi]-module. 

C. Computation of the Interpolated Polynomial from the In- 
terpolation Ideal If m 

For (mi, . . . , to,, to, + i), («i, . . . , n t , n t+ \) e N +1 , we define 
the monomial order > u in ¥ q \X\, X,, Z] such that (m\, . . . , 
to ( , m t+ \) > («i, . . . , «r, n t+ \) if a\m\+- ■ ■+a t m t +um t+ \ > ain\ + 
■ ■ ■+a t n t + un t +\, or a\m\ +• ■ ■+a t m t + um t+ \ — a\n\ +■ • -+a,n t + 
un t+ \, and m\ = ti\, mi = «2> • • •> m i-i — Ki-u m i < f° r some 
1 < / < t + 1. As done in |fl"5l , the interpolation polynomial 
is the smallest nonzero polynomial with respect to > u in the 
preimage of I? m . Such a smallest element can be found from 
a Grobner basis of the F 9 [xi] -module If m C in Theorem [JJ To 
find such a Grobner basis, Lee and O' Sullivan proposed the 
following general purpose algorithm as [15, Algorithm G]. 

Their algorithm [15 Algorithm G] efficiently finds a Grob- 
ner basis of submodules of F 9 [xi] J for a special kind of 
generating set and monomial orders. Please refer to [ 1 1 for 
Grobner bases for modules. Let ej, e, be the standard 
basis of F 9 [xi] s . Let u x , u\, . . ., u s be positive integers. Define 
the monomial order in F ? [xi] J such that x"'e, >lo x " 2 £j if 
n\u x + Uj > niu x + Uj or n\u x + = n^u K + uj and / > j. For 
/ = £i=i MxOei e F q [ Xl Y, define ind(/) = max{/ 1 f(x x ) * 0), 
where fi(x\) denotes a univariate polynomial in x\ over F ? . 
Their algorithm lfT31 Algorithm G] efficiently computes a 
Grobner basis of a module generated by g\, . . . , g s e F ? [^i] s 
such that ind(g,) — i. The computational complexity is also 
evaluated in IfTTl Proposition 16]. 

Let ( be the maximum Z-degree of the interpolation poly- 
nomial in lfT2l . The set If m e in Theorem [TJ is an F 9 [jci]- 
submodule of F ? [xi] fll(f+1) with the module basis \yfZ k \ j — 0, 

oi-i, k = o, e\. 

Assumption 2: We assume that we have / e -C(°°0 whose 
zero divisor (/)o = D. 

Observe that Assumption [2] is implied by [4 , Assumption 2] 
and is weaker than [4, Assumption 2]. Let {/) be the ideal 
of -L(ooQ) generated by /. By [17, Corollary 2.3] we have 
£(-D + oog) = (/). By El Corollary 2.5] we have X(-/D + 
00Q) = (f). 

Without loss of generality we may assume existence of x 1 e 
£(°°Q) such that / € F 9 [x']. By changing the choice of X\, . .., 
x, if necessary, we may assume xi = x' and / e F 9 [xi] without 
loss of generality, while it is better to make -Vg(jci) as small 
as possible in order to reduce the computational complexity. 
Under the assumption / e F 9 [;q], f'yj satisfies the required 
condition for r/ij in Theorem [TJ By naming yjz k as e\+j+k u , 
the generators in Theorem [TJ satisfy the assumption in ifTBI 
Algorithm G] and we can efficiently compute the interpolation 
polynomial required in the list decoding algorithm in IfTZl . 

Proposition 3: We assign the weight -ivQ(xi) - VQ(yj) + ku 
to the module element x' { yjZ k when we use (15, Algorithm G] 
to find the minimal Grobner basis of If mt . Under Assumption 
[2] the number of multiplications in [15 Algorithm G] with 
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the generators in Theorem Q] is at most 
[max{-v Q (yj)} + m(n + 2g - 1) + u(l - m)fd[ l V z' 2 . (3) 

IV. New List Decoding based on Majority Voting inside 
Grobner Bases 

A unique decoding algorithm for one-point codes over C a b 
curves has recently been introduced in [14|. This algorithm is 
also based on the interpolation approach, an ideal containing 
the interpolation polynomials of a received word is computed. 
Moreover, the algorithm in lfl4l combines the interpolation ap- 
proach with syndrome decoding with majority voting scheme. 
However, this algorithm only considers the non-improved code 
C„ assuming that u < n. 

The aim of this section is to extend this algorithm for 
one-point codes defined over general curves without assuming 
u < n, besides, the modified algorithm performs list decoding. 
Furthermore, we can speed up the algorithm and deal with 
Feng-Rao improved codes by changing the majority voting. 
Still, the main structure of the algorithm remains the same. 
We stress that we do not assume Assumption [2] in this section. 

Let F/F q be an algebraic function field as in Sec. UU we 
consider the same notation and concepts already introduced 
in Sees. [XT] and [HI] Let F = *2> • • •» **} c S an d consider 
the code Cr defined in Eq. ©. We will assume that F = F^p, 
where 

Findep = {s e F I ev(ip s ) £ (ev(^v) : s' e F, s' < s)}, (4) 
since there is no interest in considering s e F\F mi i ep . Let r be 
a received word. Choose any codeword in Cr as c and define 
e(c) — r - c. Then there is a unique 

with 2 = evOu) = Qi(P{), . . . , J(P„)). 

As in Sec. IIII-CI we consider X(ooQ) as an F[xi] -module 
of rank a\ with basis {yj | < j < fli}. For / € F[jq], we 
denote by f[x\] the coefficient of the term x\ in /. 

The following ideal containing the interpolation polynomial 
for a received word r is defined in |fl4*l . 

h = {f(z) e JXcoQ)z © JXooQ) I v,,(/(r,)) > 1, 1 < i < n). 

Moreover, If is a special case of the interpolation ideal in 
|[T5l . Thus, by Sec. HIl] we have that -C(c°Q)z © -£(°°g) is a 
free F ? [*i] -module of rank 2ai with basis {yjZ,yj I < j < 
a{\. Hence an element in -C(°°0z ffi -C(°°Q) can be uniquely 
expressed by monomials in 

Q, = [faz* | < i,0< j < flj,0 < k < 1}. 
Recall also that an element in H(ooQ) can be uniquely ex- 
pressed by monomials in Qo = {x\yj \ < i, < j < ci\). 

By the previous section, 

G = {770, rju . . . ,rj ai -i,z - h?,yi(z - h?), ...,y ai -i(z- hf)}, 
with rji and hf as in Sec. [Till is a Grobner basis of the F ? [*i]- 
module If with respect to the monomial order >^ VQ Q lf ) defined 
in Sec. |IlF€l 

Let Jg(g) = n Ci# om, be the ideal of the error vector and let 
e, € -C(ooQ) such that -vg(e,) is the minimum among {/ e 
Jgf^ I — vg(/) = i (mod fli)}, for i = 0, . . . ,a\ — 1. One has 
that {eo, e\,..., e a \-\ 1 is a module-Grobner basis with respect 
to the restriction to H(ooQ) of the order >„ introduced in Sec. 
IIII-CI (which is independent of u). Note that -VQ(Jg^) — {s - 
v Q (efi\0<i<a u seS}. Then 

deg^CLTte)) = dim F £(ooQ)/J giS) = wt(^(?)). (6) 

0<i<oi 



Before describing the algorithm, we remark that its cor- 
rectness is based in a straightforward generalization of some 
results in [14, Sec. Ill- A]. In particular, we will directly refer 
to these results in the description of the algorithm, because 
the same proofs in [14| will hold after considering yj instead 
of yj and prec(s) instead of s — 1, where prec(s) = maxjs' € 
S : s' < s), for s e S. The reader should also be aware that 
in this section we follow the notation of previous sections, 
however, the notation in lfT4l is different. Namely, P x denotes 
Q, R denotes -C(°°0, S denotes -Vg, x denotes x\ and the 
semigroup S is the one generated by {a,a\, ...,«,} in lfT4l . 
A. Decoding Algorithm 

We can now describe the extension of the algorithm in 1 14 1. 
For a constant r e N the following procedure finds all the 
codewords within Hamming distance r from the received word 
t 

1) Initialization: Let = -VqQi?) and G be the Grobner 
basis of the F 9 [jci] -module If defined above. Let r Sk) = r 
and = G. We consider now the steps Pairing, 
Voting, Rebasing for s € S n [0,A^] in decreasing order 
until the earlier termination condition is verified or, 
otherwise, until s = s\. 

2) Pairing: We consider that 

^' ! > = e'+ev(^ s \ = ^ip s +n ( v™ (s >\ £ L prec(s) 

(7) 

and we will determine cl>' s by majority voting in step 3) 
provided that wt(e*) < r. Let B {s) = {gfjf I < i < 
a\) be a Grobner basis of the F g [*i] -module If,) with 
respect to > s where 

•C - Yj Ci 'jyJ z+ X ,/i -' V > with (';.,,/,, c F„|a,|. 

0<7<ai 0<7<ai 

ff">= ^ aijyjz+ Y bijyj, with ay.fty e F,[*i], 

0<j'<ai 0<j<fli 

and let v^' s) = LC(^,,). We assume that LT(/: (i) ) = a,- 
and LT(g' 5) ) = ^iy,-. By lfT4l Lemmas 2,3,4], one has 
that 

Y deg(a (> ,) + Y de g(^u) = n, 

0<i<ai 0<i<fl] 

and -v Q (a u yi) < -v G (e,) and -v e (^-,,y,) < — vqC^) or, 
equivalently, deg(a,-,) < deg X[ (LT(e,)) and deg(dy) < 
deg A] (LT(t7,)), for < / < fli. 

For < / < fli, there are unique integers < i' < a\ and 
ki satisfying 

-v Q (a u yi) + s = a\ki - v e (y,0. 
Note that by the definition above 

i' — i + s mod a 1 , (8) 
and the integer -vg(a,- >i y,) + s is a nongap if and only 
if ki > 0. Now let c, = deg^flV/) - k t . Note that the 
map i i-> /' is a permutation of {0, 1 , . . . , a - 1 } and that 
the integer c, is defined such that a\Ci = -VgCflV/yj') + 

vg(fl;,0'i) - s - 

3) Voting: For each z" 6 {0, . . .fli — 1}, we set 

Hi = FC{a u ynp s ), Wi = : , c t = max{c,-,0}. 

We remark that the leading coefficient /i, must be con- 
sidered after expressing a^yi(f s by monomials in Oo- 
Let ^ 

v(i) = — ^ max{-v e (77,v) + v Q (y,)-s,0}. (9) 

fll 0</< fl , 

The error correction capability of the algorithm will be 
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determined by the values v(s). The number v(s) was 
introduced in Ifl4l Proposition 10], we will show in 
Proposition [4] that it is equivalent to the cardinality of 
some sets introduced in (3) for bounding the minimum 
distance. 

We consider two different candidates depending on 
whether s e F or not: 
. If s € S \ T, set w = 0. 



If s e F, let w be the element of F„ with 



(10) 



since by Proposition [5] we will have that 

Yj C, !> Y S i ~ 2wt (^) + V(S), 

where cl>' s and e' are as defined at Eq. (0. 
Let w s = w. If several w's satisfy the condition above, 
repeat the rest of the algorithm for each of them. As s 
decreases, v(s) increases and at some point we have 2t < 
v(s) and at that point at most one w verifies condition 

(Ho]i. 

An interesting difference to the Feng-Rao majority vot- 
ing is as follows: In the Feng-Rao voting, when wt(e) 
is large, voting for the correct codeword can disappear, 
i.e., there can be no vote for the correct codeword. In 
contrast to this, in the Grobner based majority voting, the 
correct codeword always has a vote, because If contains 
all the possible codewords and errors. 
4) Rebasing: We consider the automorphism of -£(°°0[z] 
given by z h» z + w<f s that preserves the leading terms 
with respect to > s . Hence B (s) is mapped to a set which is 
a Grobner basis of \f(z + W<p s ) I / e Ijw] with respect to 
> s . However, this set is not (in general) a Grobner basis 
with respect to > pre c(,s)> which will be used in the next 
iteration. Thus, we will update it, for each i e {0, . . .a\ — 
1}: 

• If w, = w, then let 

(prec(.s)) (j)^ N 

gj -gyiz + wtps), 

/.(prec(j)) As)/ , \ 

f; = f; (z + w<ps), 

where the parentheses denote substitution of the 
variable z and let v ^ prec(s)) - v ^; 5) . 

• If w, + w and c, > 0, then let 

(prec(s)) As), , \ 
g), =fi (Z + W(fi s ) 



= x c -f i! (z + w<f s )- 



and let v* rec(s)) = ^(w - w,). 
• If w, + w and c, < 0, then let 



(prec(s)) n 
g), =gy(z + W(fi s ) 

/•(prec(j)) As)/ , \ 

ff =fj (Z + w<p s ) - 
and let y ( , prec( ' 5)) = y ( ; 5) . 



v w x c 'g)/(z + w<p s ) 



By Ifl4l proposition 5] we have that 

B (prec(,)) = {g (M)^ _^P«C.» | < / < ai}, 

is a Grobner basis of \f(z + w<p s ) \ f € } = If<. W au» 
with respect to > pre c(j), where r*P rec < J M = ^ - e\(wip s ). 
We remark that the new Grobner basis Z}(P rec<I W must be 
considered after expressing it by monomials in Qi. 
5) Earlier termination: The module If is a curve theoretic 
generalization of the genus zero case considered in |2 
Definition 9]. Let f m [ n = ctQ + za\ having the smallest 
-vg(ai) among f^ Kci - s) \ , >>j / £ | pre 1 c( ' 5)) ■ When the genus 



is zero and the number of errors is less than half 
the minimum distance, we can immediately find the 
codeword by -ao/ai CI Theorem 12]. 
Besides, as s decreases, the code Cpn treated by each 
iteration in this algorithm shrinks, where F w = {s' E 
r | s' < s}, while the number of errors remains the 
same, at some point its minimum distance becomes 
relatively large compared to the number of errors. Then 
/ m in should provide the codeword by -aola\. Actually, 
this phenomenon has also been verified by our computer 
experiments in Sec. IIV-DI 

Hence, we propose the following earlier termination 
criterion: Let d^ciCr) — mm se Yv(s) be the bound for 
the minimum distance in O. If £/AG(Cpprcc( S ») > 2r, then 
check whether aoMi 6 -C(°°0, ev(-ao/ai) £ Cpprecw) 
and 



6) 



wt 



ev(-a /ai + ^ 



0- 



< T. 



W s '(fi s 

s<s'er 

If the previous statement holds, include ev(-ao/ai + 
Yj S <s'er w s ><Ps') into the list of codewords, and avoid 
proceeding with prec(s). Otherwise, iterate the procedure 
with prec(i). 

The procedure above is based on the following observa- 
tions: 

• If there exists a codeword c e C r (precw) with Ham- 
ming distance < t from ^P rec ( J W, then, by Proposition 
[5] executing the iteration on I^mm gives the only 
codeword c as the list of codewords, corresponding 
to -ffo/ffi. Therefore, iterations with lower s are 
meaningless. 

• It was proved in [5, Lemmas 2.3 and 2.4], that if 
2wt(ev( J 8)-? (prec(; *)+2g < n-s then (3 must appear as 
-ao/ai. Then we can terminate the algorithm at lat- 
est s = maxfi | 2r + 2g < n - s}. Because, under this 
assumption, any other codeword ev(jS') e C r ( P recM) 
gives -a' Q la' x with -v e (a' 1 ) > -v G (ai), hence ft' 
cannot correspond to / m ; n . Note that the genus zero 
case was proved in [2, Theorem 12]. 

Termination: After reaching s = max{s | 2r + 2g < n - 
s] or after verifying the earlier termination condition, 

, w s „ . . . , w s .) in the 



include the recovered message (w s 
output list. 

B. Relation of v(s) to fi3§ 

In fl4*l . v(s) was introduced in the same way as in Eq. (O. 
We claim that v(s) is equivalent to the sets used in y], [9]| for 
bounding the minimum distance. Let Fj n( iep as in Eq. ©. Let 
5inde P = {u | C„ + C„_i). Define 

A( s ) = \\jeS \j + s eS indep }\. (11) 
The bound in [3 Propositions 27 and 28] for the minimum 
distance of CY is 

^ag(Ct) = mm f / l(' s ) \ s e T} > n - s/(. 

The following proposition implies that d u — min{v(i) | s e 
S,s < u] is equivalent to (1ag(C u ), and therefore [3, Theorem 
8] implies [14, Proposition 12]. 

Proposition 4: Let s e S , one has that v(s) = A(s). 

C. Proof and error correction capability of the algorithm 
We will prove in this section the correctness and error 

correction capability of the algorithm. Using lfT4l Lemmas 6,7 
and Proposition 8] we have the following proposition that is 
an extension of [14, Proposition 10]. 
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Proposition 5: Let A(s) - v(s) as in Eqs. © and ( fTTT i. We 
have 

2 Ci > J] - 2wt(?(cO) + 

One has that the set B (s) is a Grobner basis of the F 9 [xi]- 
module /^») with respect to > s by lfl4l Proposition 11] and 
combining this with Proposition [5] we obtain the error cor- 
rection capability of the algorithm in Sec. IIV-AI as a unique 
decoding algorithm. Moreover, it a list-decoding algorithm 
with error bound r by Eq. (11 Ot . 

Theorem 6: Let r — c + e(c). If wt(e(c)) < t then c is in 
the output list of the algorithm in Sec. IIV-AI If 2wt(e(c)) < 
^AG(Cr) then w s - (l> s for all s e T and 
2^ w s <Ps = H, 

ser 

where p and a> s 's are as defined at Eq. Q. 

D. Computer experiments: Comparison against Guruswami- 
Sudan algorithm 

We implemented the proposed list decoding algorithm on 
Singular [111 and decoded 1,000 randomly generated code- 
words with the following conditions. Firstly we used the one- 
point primal code C u with u — 20 on the Klein quartic over 
F g . It is [23, 18] code and its AG bound is 4 while Goppa 
bound is 3. Guruswami-Sudan decoding can decode up to 1. 
Our algorithm can list all the codewords within Hamming 
distance 2. The errors were uniformly randomly generated 
among the vectors with Hamming weight 2 and executed the 
decoding algorithm with r = 2. With 757 transmissions the list 
size was 1, with 180 transmissions the list size was 2, and with 
63 transmissions the list size was 3, where the list size means 
the number of codewords whose Hamming distance from the 
received word is < r. The maximum number of iterations was 
266, the minimum was 11, the average was 195.7, and the 
standard deviation was 60.5. 

Secondly we used the improved code construction [6] with 
the designed minimum distance 6. It is a [64, 55] code. In order 
to have the same dimension by C u we have to set u = 60, 
whose AG bound Q is 4 and the Guruwsami-Sudan can 
correct 2 errors. The proposed algorithm finds all codewords 
in the improved code with 3 errors. The errors were uniformly 
randomly generated among the vectors with Hamming weight 
3. With 998 transmissions the list size was 1, and with 2 
transmissions the list size was 2. The maximum number of 
iterations was 1128, the minimum was 14, the average was 
794.2, and the standard deviation was 179.8. 

Thirdly we used the same code as the second experiment, 
while the errors with Hamming weight 3 were randomly gener- 
ated toward another nearest codeword. With 901 transmissions 
the list size was 2, and with 99 transmissions the list size was 
5. The maximum number of iterations was 818, the minimum 
was 196, the average was 754.5, and the standard deviation 
was 185.3. Observe that the list size cannot become 1 under 
this condition, and the simulation confirmed it. 

V. Conclusion 

We generalized the two decoding algorithms [ 15 1, [ 14 1 to all 
algebraic curves. We also extend the latter algorithm [14| to 
a list decoding one. The resulted list decoding algorithm can 
correct more errors than the Guruswami and Sudan algorithm 
ITLZl . The detailed analysis of the computational complexity of 
the latter one is a future research agenda. 
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